{"id":"CVE-2025-3599","aliases":["EUVD-2025-12755","GHSA-m76m-45c7-gvr3"],"status":"published","title":"Symantec Endpoint Protection Elevation of Privilege","description":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0029,"percentile":0.21872,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-367"],"published":"2025-04-30T16:49:18Z","modified":"2026-06-17T09:20:16Z","products":[{"vendor":"broadcom","product":"symantec_eraser_engine"},{"vendor":"symantec","product":"symantec endpoint protection"}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25659","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3599"},{"url":"https://github.com/advisories/GHSA-m76m-45c7-gvr3"}],"sources":{"cve":[{"id":"CVE-2025-3599","title":"Symantec Endpoint Protection Elevation of Privilege","description":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.","status":"published","published":"2025-04-30T16:49:18.064Z","modified":"2025-04-30T17:27:30.872Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-12755","description":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.","status":"published","published":"2025-04-30T16:49:18Z","modified":"2025-04-30T17:27:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:51:58.556756Z"}],"ghsa":[{"id":"GHSA-m76m-45c7-gvr3","title":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be...","description":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.","status":"published","published":"2025-04-30T18:31:55Z","modified":"2025-04-30T18:32:03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T15:02:04.725122Z"}],"nvd":[{"id":"CVE-2025-3599","description":"Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.","status":"published","published":"2025-04-30T17:15:50.76Z","modified":"2026-06-17T09:20:16.523Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:11:02.570368Z"}]}}